Website access supervision method, secure socket layer proxy device, terminal and system

Abstract

The invention discloses a website access supervision method, a secure socket layer proxy device, a terminal and a system, and the secure socket layer proxy device is installed at a user terminal and is used for obtaining first ciphertext content obtained after a browser encrypts a website access request based on a first secret key; wherein the first secret key is a secret key determined by the browser and the secure socket layer proxy device in the secure socket layer handshake process; decrypting the first ciphertext content based on the first secret key to obtain first plaintext content; encrypting the first plaintext content based on a second secret key to obtain second ciphertext content; wherein the second secret key is a secret key determined by the secure socket layer proxy device and the server in the secure socket layer handshake process; sending the second ciphertext content to the server so that the server returns a response result of the website access request; and auditingrelated information is transmitted to a security gateway pre-deployed outside the user terminal, so that the security gateway audits the plaintext content. The performance pressure of the security gateway is effectively reduced.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a website access supervision method, a secure socket layer proxy device, a terminal and a system. Background technique [0002] At present, in order to audit and control https websites (https, that is, Hyper Text Transfer Protocol overSecureSocket Layer, Hypertext Transfer Security Protocol), the existing mainstream solution is to connect the security gateway to the customer network in series, and then use https on the security gateway to The website's control and audit strategy acts as a proxy for the corresponding https website, and this process specifically involves the secure sockets layer man-in-the-middle technology (secure sockets layer, namely SSL, SecureSockets Layer). However, the secure socket layer man-in-the-middle technology has extremely high requirements on the performance of the security gateway, resulting in excessive pressure on the performance of the securit...

AI Technical Summary

Problems solved by technology

However, the secure socket layer man-in-the-middle technology has extremely high performance requirements on the security gateway, resulting in excessive pressure on the performance of the security gateway

Images